Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft
File: KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft (raw, json)
Hash identifier: dn6+1TgeWVgnXlyunJU8wXf4iO+GQ2HzGfSQCqpn564=
Subject key identifier: EF:C6:0F:7E:D3:E8:0C:C0:6E:E5:BF:F5:B9:F7:5D:1D:13:6C:AB:99
Authority key identifier: 28:1A:0B:BF:52:D8:D2:D4:85:94:34:3A:55:40:9F:C1:0B:B7:B7:1A
Certificate issuer: /CN=281a0bbf52d8d2d48594343a55409fc10bb7b71a
Certificate serial: 019D378967713F8B9F0DD6985F51D7D4CB63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBoLv1LY0tSFlDQ6VUCfwQu3txo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 03:00:44 +0000
Manifest this update: Sun 29 Mar 2026 03:00:44 +0000
Manifest next update: Mon 30 Mar 2026 03:00:44 +0000
Files and hashes: 1: 9rvSIJG4GAUEEFzw4LIIEomRjLs.roa (hash: vIaPvb+ycmPmGlSHBmqVI505OuvAOEDswUw9t3/PGlc=)
2: KBoLv1LY0tSFlDQ6VUCfwQu3txo.crl (hash: lFC80AUPmsj3rkcU5XwiCn0HTqNdAWWCS4C/FHglD7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBoLv1LY0tSFlDQ6VUCfwQu3txo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:67:71:3f:8b:9f:0d:d6:98:5f:51:d7:d4:cb:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=281a0bbf52d8d2d48594343a55409fc10bb7b71a
Validity
Not Before: Mar 29 03:00:44 2026 GMT
Not After : Mar 30 03:00:44 2026 GMT
Subject: CN=efc60f7ed3e80cc06ee5bff5b9f75d1d136cab99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:41:c7:72:a1:5c:a6:9a:c5:e8:d3:4d:16:f0:
10:de:56:c5:f4:52:84:f0:92:68:3e:32:c2:b2:ea:
ee:19:10:73:8e:81:8b:a2:9d:0a:b5:f2:3a:dc:bc:
da:01:9f:4c:16:e4:1a:6b:d3:ac:60:4a:e4:d1:8e:
9e:0b:b3:af:8b:d2:09:5b:12:56:0d:51:39:85:8a:
24:83:02:e4:f6:ef:45:5e:12:38:bd:25:31:10:14:
eb:a4:e4:1d:19:9f:11:e9:ca:00:e8:c1:0c:54:3d:
41:7f:3f:03:5e:60:b5:31:f4:1e:9d:0f:e9:5e:f6:
b1:42:fb:5d:c3:6b:a2:3b:ad:79:d6:25:ee:7f:4a:
4f:ba:95:02:e5:6f:53:ae:b2:62:d0:e7:6a:7c:3a:
2e:21:e8:a5:b4:6a:2c:9c:02:06:83:a3:b5:d4:e8:
82:15:b7:16:95:b2:3e:35:a4:b3:d5:73:f7:d9:01:
32:f8:24:ca:0f:c1:6b:fc:24:27:c5:5e:2a:d6:58:
b6:fe:65:78:a2:5b:db:bc:d2:86:53:82:85:b9:9f:
ac:14:db:28:05:77:58:3f:12:2b:7d:8d:7f:a9:ee:
e4:84:36:90:58:3b:fb:41:e1:6a:61:82:98:ae:dc:
25:5d:1d:23:4e:a6:d3:82:bd:6e:11:95:ad:d3:42:
8f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C6:0F:7E:D3:E8:0C:C0:6E:E5:BF:F5:B9:F7:5D:1D:13:6C:AB:99
X509v3 Authority Key Identifier:
keyid:28:1A:0B:BF:52:D8:D2:D4:85:94:34:3A:55:40:9F:C1:0B:B7:B7:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBoLv1LY0tSFlDQ6VUCfwQu3txo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:6f:3a:33:1a:86:65:f3:69:cf:e7:96:c7:f1:14:95:a0:b0:
8f:d4:77:b5:a0:0f:66:57:0c:05:64:a9:e5:d7:80:de:d5:39:
62:f4:1b:5f:c0:e2:e0:51:36:5c:ab:00:f3:7a:0e:19:89:1d:
b6:a2:8e:4a:9b:a3:a0:d6:77:27:2a:52:1f:42:d4:63:7c:e3:
4e:aa:26:72:fb:42:e2:9b:3b:a1:c4:24:58:e5:66:f3:f6:6d:
da:5f:94:43:65:16:87:4b:a9:d9:3b:87:dc:41:09:b6:c3:02:
3f:2e:34:eb:3d:17:7a:46:db:42:1c:0e:51:ce:d9:1f:2e:fa:
c7:75:6d:dc:b1:8c:36:9a:af:ac:d9:78:7d:d1:e8:14:c1:b9:
18:5c:6c:2e:ca:6b:55:d9:cf:4b:ee:fd:7e:48:4f:27:29:70:
fc:d1:d9:38:fa:15:51:5b:73:74:44:4c:f5:84:ec:d3:d1:88:
04:1c:b0:73:88:d3:90:a5:20:7c:36:3b:c8:96:fe:bc:c5:26:
c4:fe:76:3f:73:9b:27:6b:2b:36:76:ba:65:96:ec:78:2c:1e:
ad:78:d1:e4:d3:7c:12:77:02:80:a2:f4:e5:a5:05:b4:25:d2:
22:5c:1d:6d:ba:01:4a:84:da:0b:2a:e7:d3:be:12:5a:d1:26:
de:77:44:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:51 2026 by rpki-client